User account object management

Abstract

A method, system and computer-readable medium for managing user account objects within a digital environment via a framework. The framework comprising: an API enabling a user to send and receive commands to the digital environment; a database having user account objects associated with a pool of user account objects; and an isolated network segment with resources for performing a task. The method comprises receiving a request, via the API, from the user to perform the task, and activating a user account object from the database. The user account object is configured for performing the requested task; and a command from the user, using the configured user account object, is received at the isolated network segment, to enable the task to be completed. The user account object is deallocated when a completion indication is detected from the isolated network segment. Deallocation comprises dissociating the user account object with the user.

1 . A method for managing user account objects within a digital environment via a framework, the framework comprising:
 an application programming interface, API, the API enabling a user to send and receive commands to the digital environment;   a database comprising a plurality of user account objects, each user account object being associated with a pool of user account objects; and   at least one isolated network segment configured to perform one or more tasks, the at least one isolated network segment comprising a plurality of dynamically instantiable resources;   the method comprising the steps of:
 receiving a request, via the API, from the user to perform a task of the one or more tasks; 
 activating a user account object from the database, by associating the user account object with the user and the at least one isolated network segment; 
 configuring the user account object for performing the requested task; 
 receiving at the at least one isolated network segment, at least one command from the user, to enable the requested task to be completed within the at least one isolated network segment, wherein the at least one command is sent by the user using the configured user account object; and 
 deallocating the user account object upon detection of a completion indication from the at least one isolated network segment indicating the completion of the requested task, wherein deallocation comprises dissociating the user account object with the user and associating the user account object with the pool of user account objects. 
   
     
     
         2 . The method according to  claim 1 , wherein the step of configuring the user account object comprises provisioning one or more attributes of the user account object for performing the requested task. 
     
     
         3 . The method according to  claim 1 , wherein a plurality of user account objects are activated and allocated to the user and, wherein the step of configuring the plurality of user account objects comprises provisioning each of the plurality of user account objects with differing attributes for performing the requested task. 
     
     
         4 . The method according to  claim 1 , further comprising selecting one or more pre-provisioned user account objects from the database, the one or more pre-provisioned user account objects comprising at least one required attribute for performing the requested task. 
     
     
         5 . The method according to  claim 2 , wherein the attributes comprise at least a security level configured to limit access of the user to at least one of the dynamically instantiable resources of the at least one isolated network segment based on the requested task. 
     
     
         6 . The method according to  claim 1 , further comprising the step of instantiating the at least one isolated network segment by configuring the plurality of dynamically instantiable resources for performing the requested task. 
     
     
         7 . The method according to  claim 1 , wherein the plurality of dynamically instantiable resources of the at least one isolated network segment are pre-configured for performing the one or more tasks. 
     
     
         8 . The method according to  claim 1 , wherein the user, and the allocated user account object, are associated with a given organization. 
     
     
         9 . The method according to  claim 1 , wherein the at least one command received by the at least one isolated network segment is received via an intermediary component. 
     
     
         10 . The method according to  claim 1 , wherein the step of deallocating the user account object further comprises resetting the user account object. 
     
     
         11 . A system for managing user account objects within a digital environment, the system comprising:
 a user device for accessing the digital environment;   storage for storing a database comprising a plurality of user account objects, each user account object being associated with a pool of user account objects;   an intermediary server comprising an application programming interface, API, the API enabling a user to send and receive commands via the user device; and   a remote server for providing at least one isolated network segment configured to perform one or more tasks, the at least one isolated network segment comprising a plurality of dynamically instantiable resources;   wherein the intermediary server is configured to:
 receive a request through the API from the user device to perform a task of the one or more tasks; 
 activate a user account object from the database, by associating the user account object with the user and the at least one isolated network segment; 
 configure the user account object for performing the requested task; 
 receive at the at least one isolated network segment, at least one command from the user device, to enable the requested task to be completed within the at least one isolated network segment, wherein the at least one command is sent using the configured user account object; and 
 deallocate the user account object upon detection of a completion indication from the at least one isolated network segment indicating the completion of the requested task, wherein deallocation comprises dissociating the user account object from the user device and associating the user account object with the pool of user account objects. 
   
     
     
         12 . The system according to  claim 11 , wherein the intermediary server is configured to configure the user account object by provisioning one or more attributes of the user account object for performing the requested task. 
     
     
         13 . The system according to  claim 11 , wherein the intermediary server is configured to activate a plurality of user account objects and allocate the plurality of user account objects to the user device and, wherein the intermediary server is configured to configure the user account objects by provisioning each of the plurality of user account objects with differing attributes for performing the requested task. 
     
     
         14 . The system according to  claim 11 , wherein the intermediary server is configured to select one or more pre-provisioned user account objects from the database, the one or more pre-provisioned user account objects comprising at least one required attribute for performing the requested task. 
     
     
         15 . The system according to  claim 12 , wherein the attributes comprise at least a security level configured to limit access of the user to at least one of the dynamically instantiable resources of the at least one isolated network segment based on the requested task. 
     
     
         16 . The system according to  claim 11 , wherein the intermediary server is configured to instruct the instantiation of the at least one isolated network segment by configuring the plurality of dynamically instantiable resources for performing the requested task. 
     
     
         17 . The system according to  claim 11 , wherein the plurality of dynamically instantiable resources of the at least one isolated network segment are pre-configured for performing the one or more tasks. 
     
     
         18 . The system according to  claim 11 , wherein the user, and the configured user account object, are associated with a given organization. 
     
     
         19 . The system according to  claim 11 , wherein the intermediary server is configured to deallocate the user account object by resetting the user account object. 
     
     
         20 . A non-transitory computer-readable storage medium comprising a set of computer-readable instructions stored thereon, which when executed by at least one processor are arranged to manage user account objects within a digital environment via a framework, the framework comprising:
 an application programming interface, API, the API enabling a user to send and receive commands to the digital environment;   a database comprising a plurality of user account objects, each user account object being associated with a pool of user account objects; and   at least one isolated network segment configured to perform one or more tasks, the at least one isolated network segment comprising a plurality of dynamically instantiable resources;   wherein managing the user account objects in the digital environment comprises the steps of:
 receiving a request, via the API, from the user to perform a task of the one or more tasks; 
 activating a user account object from the database, by associating the user account object with the user and the at least one isolated network segment; 
 configuring the user account object for performing the requested task; 
 receiving at the at least one isolated network segment, at least one command from the user, to enable the requested task to be completed within the at least one isolated network segment, wherein the at least one command is sent by the user using the configured user account object; and 
 deallocating the user account object upon detection of a completion indication from the at least one isolated network segment indicating the completion of the requested task, wherein deallocation comprises dissociating the user account object with the user and associating the user account object with the pool of user account objects.